Non évaluée

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager insecurely u...

CVE-2023-22912 Première détection SecPulse Jan 20, 2023

Description d'origine La description telle que publiée par la source (souvent en anglais).

An issue was discovered in MediaWiki before 1.35.9, 1.36.x through 1.38.x before 1.38.5, and 1.39.x before 1.39.1. CheckUser TokenManager insecurely uses AES-CTR encryption with a repeated (aka re-used) nonce, allowing an adversary to decrypt.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

advisory github.com
advisory nvd.nist.gov
web phabricator.wikimedia.org

Faits clés

Gravité: Non évaluée
Publication: Jan 20, 2023
Première détection SecPulse: Jan 20, 2023

NVD OSV

Sources de détection

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:57